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IN THE CLAIMS: 

The following is a complete listing of the pending claims: 

1 , (currently amended) A method of decrypting data stored on a storage medixim using 

an exicryption/decryption core embedded on a data storage engine, the method comprising: 

generating a pseudo-random number within the data storage engine: 

generating an internal key within the data storage engine using a the pseudo-random 

number generator; 

generating a combiriation key by combining a medium key with the internal key 
within the data storage engine; and 

within the data storage engine, decrypting a first portion of data stored on the storage 
medium with said combination key. 

2. (Previously Presented) The method of Claim 1, further comprising 
decrypting a master media key; and 
generating the medium key from the master media key. 

Claims 3 through 5 (cancelled) 

6. (Original) The method of Claim 1 wherein the combination key i$ generated by combining 
the internal key with the medixmi key in an exclusive OR function. 

7. (Previously Presented) The method of Claim 1 wherein the first portion is decrypted using 
triple DBS for two keys, wherein a first key is the combmation key and a second key is an 
additional internal key. 
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8. (Previously Presented) The method of Claim 2 wherein the medium key comprises a 
mastered system area key, a writable system area key, and a file system information key. 



9. (Previously Presented) The method of claim 8 further comprising: 
generating an additional internal key* 



10. (Previously Presented) The method of Claim 9 wherein: 
the first portion of data comprises mastered data; 

generating a combination key further comprises combining the mastered system area 
key with the internal key in an XOR function; and 

decrypting the first portion further comprises using triple DES with two keys, wherein 
the first key is the combination key and the second key is the additional internal key. 



1 L (Previously Presented) The method of Claim 9 wherein: 
the first portion of data comprises unmastercd data; 

generating a first combination key further comprises combining the writable system 
area key with the internal key in an XOR function; and 

decrypting the first portion further comprises using triple DES with two keys, wherein 
the first key is the combination key and the second key is the additiot^ internal key. 



12. (Previously Presented) The method of Claim 1 1 further comprising: 
storing a second portion of data on said unmastered area; and 
encrypting the second portion of data using single DES, wherein the key is the 
combination key. 
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13. (Previously Presented) The method of Claim 9 further comprising: 

generating an additional combination key by combining the file system information 
key with the internal key in an XOR function; 

decrypting a file system stored on the storage medium using the internal key; 

decrypting a second portion of data using triple DES with a first and a second key, 
wherein the first key is an additional combination key and the second key is the additional 
internal key, the $econd portion comprising a plurality of file pointers linking a file system 
and the first portion of data. 

14. (previously presented) A method of decrypting data t^ing a data storage engine 
comprising a data buffer and an application specific integrated circuit (ASIC), the ASIC 
having an encryption/decryption engine and a pseudo-random number generator, and the data 
being stored on a storage medium, the method comprising: 

generating a plurality of internal keys using the pseudo-random number generator; 

decrypting a master media key and a directory structure corresponding to a first 
portion of the data using at least one internal key; 

generating a plurality of medium keys from the master media key; 

generating a plurality of combination keys fi-om the plurality of medium keys and the 
plurality of internal keys; and 

decrypting a first portion of the data with a first combination key from the plurality of 
combination keys. 
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15. (Original) The method of Claim 14 wherein the pseudo-random number generator 
coniprises a logical feedback shift register, and wherein "generating a plxirality of internal 
keys" further comprises: 

seeding the logical feedback shift register with a seed stored in the ASIC. 

16. (Original) The method of Claim 14 further comprising: 

decrypting a plurality of file pointers linking the directory structure to the data using a 
second combination key, wherein the plurality of decrypted file pointers is stored within the 
ASIC. 

17. (Original) The method of Claim 14 fiirther comprising: 

encrypting said first portion. 

18. (Original) The method of Claim 17 wherein: 

said decrypting a first portion of data further comprises decrypting using triple DES 
with two keys, wherein a first key is the first combination key and the second key is a first 
internal key; and 

said encrypting further comprises encrypting using single DES, wherein the key is a 
second internal key. 

19. (Original) The method of Claim 17 further comprising 

decrypting a second portion of the data using a second combination key, wherein the 
first portion comprises mastered data and the second portion comprises data saved by a user. 
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20, (previously presented) A method of encrypting data stored on a storage medinm vising 
an encryption/decryption core embedded on a data storage engine^ the method comprising: 

generating a plurality of internal keys using a pseudo-random number generator within 
the data storage engine; 

decrypting a master media key stored on the storage medium using at least one of the 
plurality of internal keys; 

generating a plurality of medium keys from the master media key; 

generating a first combination key by combining a medium key with an internal key; 

encrypting a first portion of data using said first combination key; 

storing the first portion on the storage medium. 

21, (Original) The method of Claim 21 wherein encrypting a first portion further comprises 
encrypting using single DBS. 

Claims 22 through 25 (cancelled) 
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